Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gSc2CtIuANSMwXBOoLsv8zQ34Fw.roa
File: gSc2CtIuANSMwXBOoLsv8zQ34Fw.roa (raw, json)
Hash identifier: BVo7FzGUOl6ag25PmguuOsOInbqrk7nzoY1Rwd9ZOpY=
Subject key identifier: 81:27:36:0A:D2:2E:00:D4:8C:C1:70:4E:A0:BB:2F:F3:34:37:E0:5C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183A9308733FDE954AD3042105A8F14B7C8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gSc2CtIuANSMwXBOoLsv8zQ34Fw.roa
Signing time: Wed 05 Oct 2022 17:27:53 +0000
ROA not before: Wed 05 Oct 2022 17:27:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:30:87:33:fd:e9:54:ad:30:42:10:5a:8f:14:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 5 17:27:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8127360ad22e00d48cc1704ea0bb2ff33437e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:1a:1a:4f:a7:c4:8c:53:95:38:b2:43:06:
ee:ac:ff:9f:2a:db:f5:ce:92:3d:ba:54:18:06:be:
f1:03:23:78:cf:71:c4:34:2c:8b:c7:c1:c4:1a:9c:
1c:5a:95:56:9d:1c:e9:e5:a5:b2:50:c0:90:72:ca:
6f:0b:88:ed:82:66:f0:df:5d:15:97:c9:f0:ca:85:
fd:78:4a:3b:7b:cb:58:1b:6f:90:11:fd:ed:5d:5a:
f0:18:c8:30:24:d6:d1:18:a6:70:b0:d5:c0:c7:da:
c9:62:5e:8c:9d:1d:1a:01:be:c8:11:fa:65:e2:26:
46:18:34:80:91:60:8f:a0:f1:db:ef:b2:aa:50:02:
5c:7d:7f:2b:09:13:f9:16:7d:7a:05:5e:84:15:74:
fa:74:88:25:bd:35:4b:2d:7f:d0:21:97:3b:b9:a8:
20:88:d7:eb:61:a4:16:98:12:7b:77:9f:c0:e0:51:
47:f2:51:55:a3:50:a3:8d:af:4a:a5:04:c3:dd:8b:
3d:8d:8e:97:56:e7:72:d2:65:be:b8:ce:86:84:f2:
61:80:cb:ca:f9:99:d8:c1:3c:13:69:41:c7:03:5a:
55:b7:5f:08:40:17:9f:b3:31:ae:49:01:12:6a:2c:
2c:ea:65:10:ab:29:51:fb:66:1d:35:7f:20:b9:96:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:36:0A:D2:2E:00:D4:8C:C1:70:4E:A0:BB:2F:F3:34:37:E0:5C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gSc2CtIuANSMwXBOoLsv8zQ34Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.91.0/24
163.5.97.0/24
163.5.99.0/24
163.5.118.0/24
163.5.124.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.179.0/24
163.5.212.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fe:ef:ef:40:bc:47:c9:71:c8:da:bd:61:71:bb:b5:6a:a7:
49:97:a3:74:07:bc:87:d1:34:38:74:e1:41:71:d6:ec:be:a7:
e0:4b:b7:0a:cf:c9:1b:3d:92:4d:36:61:8a:36:32:ff:b4:fd:
a2:b5:4a:96:30:59:66:66:2b:c1:ab:06:ad:36:ea:32:29:50:
5e:18:a3:82:66:c3:f3:5a:de:d1:8e:74:6e:66:50:c2:55:12:
79:f9:ad:04:be:89:6c:ff:53:3f:13:c6:b0:af:ca:80:40:bb:
c9:0a:34:c1:40:35:3d:58:6a:ed:2a:79:7f:79:91:42:29:47:
09:12:d1:76:8c:28:59:48:d4:74:23:46:89:c3:50:b9:3f:4b:
a1:9b:7f:03:ac:db:b6:dd:19:85:4f:05:0f:12:4b:0d:c2:88:
58:a9:33:4e:03:6b:a8:dc:15:19:e8:e2:ef:75:d1:cf:69:45:
60:45:1c:6e:ec:43:06:62:38:37:c9:59:ba:ae:0d:ce:78:77:
2e:f9:41:13:b3:93:bd:7c:e9:eb:ab:a6:cd:a5:0e:95:67:d8:
13:47:0b:83:0e:c9:b4:a4:e0:22:f4:91:ce:d5:8b:6a:c2:0b:
24:13:4c:a1:3c:60:2d:cb:96:24:90:41:6b:16:81:0e:e5:bc:
80:76:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org